Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: bvdXmdaAU04YgIIJhu/8MaOIZIUTCBwsNdMmfFig1DI=
Subject key identifier: 83:DD:FB:FC:D3:4A:B8:15:DA:53:59:B7:0E:20:39:99:61:D6:D9:59
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 01A163B3644619CF1A1EA7A79E1A29E92F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: 02F7
Signing time: Thu 22 Oct 2026 13:01:03 +0000
Manifest this update: Thu 22 Oct 2026 13:01:03 +0000
Manifest next update: Fri 23 Oct 2026 13:01:03 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: Tsnyf/RwxkjH5Xve3lEJxOfSp1VegxWJhWRsaOchmMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b3:64:46:19:cf:1a:1e:a7:a7:9e:1a:29:e9:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Oct 22 13:01:03 2026 GMT
Not After : Oct 23 13:01:03 2026 GMT
Subject: CN=83ddfbfcd34ab815da5359b70e20399961d6d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:fa:78:d2:ee:31:7a:a7:9e:5d:b6:87:56:
65:ee:a2:04:1e:77:41:bb:3b:b6:17:c2:ec:99:9b:
ed:86:87:1f:f5:4d:1e:78:6c:a6:a7:b6:dd:57:76:
d1:1e:96:0d:9e:b0:64:5c:af:d0:40:11:3d:56:f7:
b9:4f:ae:d8:7b:c5:41:07:46:30:44:cd:a8:5e:46:
ee:68:8d:6c:7f:bf:30:e5:fb:10:38:e6:ec:68:23:
19:d5:ac:52:be:a1:c7:0f:7c:cf:28:b3:e0:db:e3:
55:60:5e:c5:5e:4c:5e:86:fd:99:f5:bf:38:18:b9:
eb:cc:68:33:3e:65:52:75:c3:53:b8:6d:59:eb:e4:
a6:70:a1:82:60:20:7f:dd:d3:4e:58:c0:76:5e:ce:
e4:06:48:2e:26:70:96:e3:63:8a:44:92:6b:21:aa:
c8:24:9a:92:57:ee:da:40:06:31:7f:95:9e:40:14:
c7:4f:26:9d:10:9e:a4:0f:26:ca:55:e0:f2:88:95:
42:00:68:0f:e1:b8:59:e5:b7:48:b6:08:0e:c6:5c:
b0:32:b2:22:36:6a:16:a7:0e:87:45:07:fe:2f:3f:
1f:9a:4e:af:55:80:86:0c:32:13:a5:69:dc:00:53:
3e:ba:cc:2c:b6:8e:3b:9d:e6:96:ae:b9:8e:ce:fc:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DD:FB:FC:D3:4A:B8:15:DA:53:59:B7:0E:20:39:99:61:D6:D9:59
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:17:4a:2f:e5:43:49:55:7c:6c:87:d1:34:b7:8d:cd:af:89:
ce:f4:99:9a:c4:ff:e1:f3:ed:ed:fd:dc:fc:d1:e5:89:f7:b9:
b4:18:9c:2f:99:d3:a1:59:e8:e8:b3:01:69:7e:9f:84:c7:22:
a7:b0:d8:50:6e:ed:a1:bb:48:9b:a0:ff:0f:d4:24:e6:ec:e7:
c8:c5:fe:92:03:6e:83:8a:6d:61:b8:d2:f2:7b:1f:d1:32:64:
85:62:ef:83:ac:16:1b:8b:88:09:49:bd:7a:d8:31:4b:f9:b5:
ab:14:9e:c8:9d:b6:f5:67:bd:df:c4:12:d0:5c:ea:c9:7e:a0:
e7:15:d2:b7:81:f3:8e:9b:f6:fb:ee:e3:16:cc:bb:99:81:42:
7f:22:a9:24:7e:93:db:93:47:a5:2a:09:fe:cc:8d:5a:6e:99:
89:cb:7c:66:f9:db:40:88:cc:55:78:37:a3:12:f0:d1:d0:5e:
fc:62:7e:ab:ee:cb:17:34:25:02:e5:7a:6e:8c:15:8d:b9:f5:
5d:ce:82:2a:82:06:ac:f9:cc:35:fa:e2:1e:a2:82:b7:81:16:
4a:dd:62:01:95:ef:a9:25:4f:c2:7d:94:d8:2f:1a:7e:c0:c2:
23:f7:da:af:af:1c:53:41:39:ac:6f:1c:77:09:26:86:9c:aa:
b1:bd:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:30:04 2026 by rpki-client